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I In this work we study the list-decoding size of Reed-Muller codes. Given a received word 

' and a distance parameter, we are interested in bounding the size of the list of Reed-Muller 

codewords that are within that distance from the received word. Previous bounds of Gopalan, 
Klivans and Zuckerman [4] on the list size of Reed-Muller codes apply only up to the minimum 
distance of the code. In this work we provide asymptotic bounds for the list-decoding size of 
Reed-Muller codes that apply for all distances. Additionally, we study the weight distribution 
C/3 I of Reed-Muller codes. Prior results of Kasami and Tokura [8] on the structure of Reed-Muller 

O ■ codewords up to twice the minimum distance, imply bounds on the weight distribution of the 

code that apply only until twice the minimum distance. We provide accumulative bounds for 
the weight distribution of Reed-Muller codes that apply to all distances. 

> 

^ ■ 1 Introduction 
m 

The problem of list-decoding an error correcting code is the following: given a received word and 
a distance parameter find all codewords of the code that are within the given distance from the 
OO ', received word. List-decoding is a generalization of the more common notion of unique decoding in 

which the given distance parameter ensures that there can be at most one codeword of the code 
that is within the given distance from the received word. The notion of list-decoding has numerous 
^ . practical and theoretical implications. The breakthrough results in this field are due to Goldreich 

H I and Levin [3] and Sudan [TO] who gave efficient list decoding algorithms for the Hadamard code 

and the Reed-Solomon code. See surveys by Guruswami [5j and Sudan [llj for further details. 
In complexity, list-decodable codes are used to perform hardness amplification of functions [12] . 
In cryptography, list-decodable codes are used to construct hard-core predicates from one way 
functions [3j. In learning theory, list decoding of Hadamard codes implies learning parities with 
noise [7]. 

In this paper we study the question of list-decoding Reed-Muller codes. Specifically, we are 
interested in bounding the list sizes obtained for different distance parameters for the list-decoding 
problem. 
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Reed-Muller codes are very fundamental and well studied codes. RM{n, d) is a linear code, 
whose codewords / G RM(n, d) : — > F2 are evaluations of polynomials in n variables of total 
degree at most d over F2. In this work we study the code RM{n, d) when d <^ n, and are interested 
in particular in the case of constant d. 

The following facts regarding RM{n,d) are straight-forward: It has block length of 2", dimen- 
sion Y2i<d iT) minimum relative distance ^2^^ = 2"^^. We define: 

Definition 1 (Relative weight of a function). The relative weight of a function/codeword / : F2 — > 
F2 is the fraction of non-zero elements, 

wtif) = ^\{xe¥-:fix) = l}\ 

A closely related definition is the distance between two functions 

Definition 2 (Relative distance between two functions). The relative distance between two func- 
tions /, (7 : F2 ^ F2 is defined as 

dist{f,g)=F.,^fn[f{x)^g{x)] 

The main focus of this work is in understanding the asymptotic growth of the list size in 
list-decoding of Reed-Muller codes, as a function of the distance parameter. Specifically we are 
interested in obtaining bounds on the following. 

Definition 3 (List-decoding size). For a function / : F2 — F2 let the ball at relative distance a 
around / be 

B{f, a) = {p G RM (n, d) : dist{p, f) < a} 

The list-decoding size of RM{n,d) at distance a, denoted by L{a), is the maximal size of 
B(f,a) over all possible functions /, i.e. 

L(a) = max \B(f,a)\ 

In a recent work Gopalan, Klivans and Zuckerman [4j prove that for distances up to the minimal 
distance of the code, the list-decoding size of Reed-Muller codes remains constant. 

Theorem 1 (Theorem 11 in |4j). 

L{2-'^ -e)<o({\lef^^ 

Their result of bounding the list-decoding size of Reed-Muller codes is inherently limited to 
work up to the minimum distance of the code, since it uses a structural theorem of Kasami and 
Takura on Reed-Muller codes [8j, which implies a bound on the weight distribution of Reed-Muller 
codes that works up to twice the minimum distance of the code. 

Additionally, the work of ^ has developed a list-decoding algorithm for RM{n, d) whose running 
time is polynomial in the worst list-decoding size and in the block length of the code. 

Theorem 2 (Theorem 4 in [4j). Given a distance parameter a and a received word i? : F2 ^ F2, 
there is an algorithm that runs in time poly {2^ ^ '^^^ produces a list of all p £ RM{n, d) such 

that dist{p,R) < a. 

Since Gopalan et al. could obtain non-trivial bounds on the list-decoding size for distance 
parameter a that is bounded by the minimum distance of the Reed-Muller code, their algorithm 
yields meaningful running time only for a that is less than twice the minimum distance of the code. 
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1.1 Weight distribution of Reed-Muller codes 

A close notion to the list-decoding size of Reed-Muller code is the weight distribution of the code. 

Definition 4 (Accumulative weight distribution). The accumulative weight distribution oiRM{n, d) 
at a relative weight a is the number of codewords up to this weight, i.e. 

A{a) = |{p G RM{n,d) : wt{p) < a}\ 

where < a < 1. 

It is well-known that for any p G RM{n, d) which is not identically zero, wt{p) > 2-'^. Thus, 
A{2~'^ — e) = 1 for any e > 0. Kasami and Tokura [8] characterized the codewords in RM[n, d) 
of weight up to twice the minimal distance of the code (i.e up to distance 2^"'^). Based on their 
characterization one could conclude the following. 

Corollary 3 (Corollary 10 in [4J). 

A{2^~<^ - e) < (l/e)2("+^) 

Corollary [3] and simple lower bounds (which we show later, see Lemma [8]) show that A{q) = 
2®(") for a G [2~'^, 2^''^ - e] for any e > (and constant d). 

1.2 Our Results 

Gopalan et al. [1] left as an open problem the question of bounding the list-decoding size of Reed- 
Muller codes beyond the minimal distance. In particular, they ask what is the maximal a s.t. 
L(q) =2^^. 

In this work we answer their question. Specifically we show bounds on the list-decoding size of 
Reed-Muller code for distances passing the minimal distance. In fact, we show that the asymptotic 
behavior of L(a), for all < a < 1. Our first result shows that there exist "cut-off distances", at 
which the list-decoding size changes from 2®^"''^) to 2®^"'''^^): 

Theorem 4 (First main theorem - list-decoding size). Let 1 < £ < d — 1 be an integer, and let 
e > 0. For any a G [2^~'^~'^ ,2^~'^ - e] 

L(a) = 2®("') 

and L{a) = 2®("'') for any a > 1/2. 

Using Theorem IH and Theorem [2] we obtain the following algorithmic result for list-decoding 
Reed-Muller codes from an arbitrary distance. 

Theorem 5 (List-decoding algorithm). Given a received word R : F2 that is at distance a 

from RM{n,d), for a G [2^"*^"-^, 2^"*^ — e]. where 1 < i < d — 1 is an integer, and e > 0. There 
exists an algorithm that runs in time poly (2^^"' ^) and produces a list of all p G RM{n,d) such that 
dist{p, R) < a 

The weight distribution of RM{n, d) codes beyond twice the minimum distance was widely 
open prior to our work. See e.g. Research Problem (15.1) in [9j and the related discussion in that 
Chapter. 

In this work we provide asymptotic bounds for the weight distribution of RM{n, d) that applied 
for all weights 2~'^ < a < 1/2. Specifically, our second main result gives exact boundaries on the 
range of a for which A{a) = 2®("*), for any £ = 1,2, ...,d. 
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Theorem 6 (Second main Theorem - accumulative weight distribution). Let \ < t < d — 1 he an 
integer, and let e > 0. For any a G [2^~'^~^, 2^~'^ — e] 

A{a) = 2®("') 

and A{a) = 2®^"'') for any a > 1/2. 

Theorems H] and [6] are asymptotically tight for constant e > 0. For sub-constant e, and a G 
p^-d-i^ 2^-'^ — e], our bound gives: 

A{a) < L{a) < 2°("'/^') 

We conjecture this dependency on e is not optimal, and the correct dependency should be 
log(l/e) instead of We expand more on that in the body of the paper. 

1.3 Techniques 

The bounds on the accumulative weight distribution of the Reed-Muller code are obtained using 
the following novel strategy. We show that a function / : F2 — > F2 whose weight is bounded by 
wt{f) < 2-^(1 - e) can be computed as an expectation of its /cth-derivatives multiplied by some 
bounded coefficients (Lemma [T0|) . 

Using standard sampling methods we then show (Lemma llip that a function / : F2 — F2 whose 
weight is bounded by wt{f) < 2~'^(1 — e) can be well approximated by a constant number c = c{k, e) 
of its /cth-derivatives. This implies that every RM{n, d) codeword of weig ht up to 2-'=(l - e) can 
be well approximated by c = c{k, e) of its /cth-derivatives. Since the distance between every pair 
of RM{n,d) codewords is at least 2~'^, a good enough approximation of a RM{n,d) codeword 
determines the Reed-Muller codeword uniquely. Hence, the number of RM(n, d) codewords up to 
weight 2~'^(1 — e), is bounded by the number of fcth-derivatives to the power of c = c{k,e). As 
RM(n, d) codewords are polynomials of degree at most d, their /cth-derivatives are polynomials 
of degree at most d — k. There can be at most 0(2'^'* ^) such derivatives. Thus, the number of 
RM{n,d) codewords up to weight 2-'=(l - e), can be bounded by 0(2"''"')'= = 0(2'=-"'*''). We 
complement these upper bound estimations with matching lower bounds. 

A similar work in this line is the work of Viola and Bogdanov [2j , which shows that a function 
/ : F2 F2 whose weight is bounded by wt{f) < 1/2 — e can be well approximated by c = 
c{k, e) of its Ist-derivatives. Note that approximation by Ist-derivatives does not imply in general 
approximation by A;th-derivatives which is crucial for obtaining our bounds here. 

The bounds on the list-decoding size of Reed-Muller codes are obtained using similar techniques 
to the ones used for bounding the accumulative weight distributions. 

1.4 Generalized Reed-Muller Codes 

The problems of bounding both the accumulative weight distribution and the list-decoding size 
can be extended to Generalized Reed-Muller, the code of low-degree polynomials over larger fields. 
However, our techniques fail to prove tight result in these cases. We provide some partial results 
for this case and make a conjecture about the correct bounds in Appendix lAl 
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1.5 Organization 

Although our goal is bounding the list-decoding size of Reed-Muller codes, we first study the 
accumulative weight distribution of Reed-Muller codes. The techniques we develop are then easily 
transferred to bounding also the list-decoding size. 

The paper is organized as follows. In Section [2] we study the weight distribution of Reed-Muller 
codes and we prove the Second Main Theorem (Theorem [6]) . In Section [3] study the list-decoding 
size of Reed-Muller codes. We generalize the techniques of Section [2] to prove the First Main 
Theorem (Theorem H]). In Section |A] we study similar questions for Generalized Reed-Muller code 
and provide non-tight bounds for these codes. 

2 Weight distribution of Reed-Muller codes 

In this section we study the weight distribution of Reed-Muller codes, and we prove our Second Main 
Theorem (Theorem [6]) . Let RM(n,d) stand for the code of multivariate polynomials p{xi, Xn) 
over F2 of total degree at most d. In the following n and d will always stand for the number of 
variables and the total degree. We will assume that d <C n, and study in particular the case of 
constant d. 

Our Second Main Theorem (Theorem [6|) is a direct corollary of Theorem [71 giving an upper 
bound on the accumulative weight at distance 2^~'^ — e, and Lemma El giving a simple lower bound 
at distance 2^~'^~^. 

Theorem 7 (Upper bound on the accumulative weight). For any integer 1 < k < d — 1, 

^(2-^(1 - e)) < ci2"^'^ 

where c\ = (1/e)'^'^'^/'^^^ and C2 = 0{d/{d — k)\). Importantly, ci,C2 are independent of n, and ci is 
independent of e. In particular for constant d we get that 

A{2-'' - e) < 2^('4^) 
Lemma 8 (Lower bound on the accumulative weight). For any integer 1 < k < d 

In the upper bound on A{a), while the dependence on n is tight, we believe the dependence on 
e can be improved. For k = d — 1 (and constant d), the characterization of [8] shows that 

A{2^~'^ — e) = 2®("'°s(-^/'')) 

We conjecture that this is the correct dependence on e in all the range: 

Conjecture 9. Let d be constant. For any integer 1 < k < d — 1, 

A{2~'' - e) = 2®("''"'' 

We start by proving the lower bound. 
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Proof of Lemma\Ei Single out k variables xi, ...,Xk, and let q be any degree d — k + 1 polynomials 
on the remaining n — k variables. First, for any such q, the following degree d polynomial has 
relative weight exactly 2~^: 

q'{xi, ...,Xn) = XiX2...Xk-l{Xk + q{xk+i, 

The number of different polynomials q is 

□ 

We will prove Theorem [7] in the rest of the section. We start by defining discrete derivatives, 
which will be our main tool in the proof. 

Definition 5. Let / : — F2 by a function. We define the discrete derivative of / in direction 
a G to be 

fa{x) = f{x + a) + f{x) 
We define the iterated discrete derivative of / in directions ai, G F2 to be 

/ai,...,afe(x) = (...((/aja2).-.)aja;) = ^ /(x + ^ Oi) 

sc[k] ies 

We note that usually derivatives are defined as fa{x) = f{x + a) — f{x), but since we are working 
over F2, we can ignore the signs. 

We define another notion which is central to our proof, namely the bias of a function. 

Definition 6. The bias of a function / : F2 ^ F2 is 

biasif) = E^epn = F[f = 0] - P[/ = 1] = 1 - 2wt{f) 

The following lemma will be the heart of our proof. It shows that if a function / has weight 
less than 2~^, then it can be computed by a its iterated /c-derivatives. 

Lemma 10 (Main technical lemma). Let f : ¥2 ^ ¥2 be a function s.t. wt{f ) < 2^'^(1 — e). Then 
the function (-l)^(^) : Ff {-1, 1} can be written as 

where aai,...,afe o'^e real numbers, of absolute value of at most ^ 

We will first prove Theorem [7] given Lemma \T0\ and then turn to prove Lemma [TOl We will 
also need the following well-known technical lemma, which shows how to transform calculation by 
averaging many functions, to approximation by averaging few functions. 

Lemma 11 (Approximation by sampling). Let / : Fg — > F2 be a function, H = {hi, ...,ht} a set 
of functions from ¥2 to ¥2, s.t. there exist constants Ch^, ■■■,Cht of absolute value at most C , s.t. 

(-l)^(--)=E,g[,][c,,(-l)'^'(-)] (VxGF^) 
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Then f can be approximated by a small number of the functions hi,...,ht. For any 6 > 0, there 
exist functions hi, hi H for £ = 0{C'^ log 1/(5), and a function F : F2 — > F2, s.t. the relative 
distance between f{x) and /i^(x)) is at most 6, i.e. 

F,^^^^[f{x) ^ F{hi{x), ...,he{x))] < 5 

The function F is a weighted majority, i.e. it is of the form: 

F{hi{x),...,he{x))=sign{ ^^=^ ^ ) 

where sign{x) is defined by sign{x) = 1 if x > and sign{x) = — 1 if x < 0. Moreover, we can 
have si, si to be integers of absolute value at most C + 1. 

Using Lemmas 1101 and 1111 we now prove Theorem [71 

Proof of Theorem^ Fix 1 < k < d — 1. We will bound the number of polynomials p € RM{n,d) 
s.t. wt{p) < 2~'^(1 — e). Let p be any such polynomial. We apply Lemma [10] to p. We can write 
as 

(-ir(-) = E,„„,,,,F5[a.„...,,,(-ir— 

such that |aai,...,aj < ^■ 

We now apply Lemma [TT] to the set of polynomials {pai,...,ak{x) : ai,...,afc G Fg} with 5 = 
2~id+2) ^ We get that there are i = O(^) derivatives : i € [£]} s.t. the distance between 

p(x) and F{x) is at most 5, where 

Fix) = s^gn{ ^^=^''^ ^> ) 

and si, S£ are integers of absolute value at most O(^). 

We now make an important yet simple observation, that will let us bound the number of low 
weight polynomials by bounding the number of functions F{x). Given any F(x), there can be at 
most one p E RM(n,d) s.t. dist{F,p) < 6. Assume otherwise that there are two polynomials 
p',p" E RM{n,d) s.t. dist{p',F) < 5 and dist{p",F) < 5. By the triangle inequality dist{p\p") < 
25 < 2^'^, but this cannot hold \ip',p" are two different polynomials, since the minimum relative 
distance of RM{n, d) is 2"'^. 

So, if we bound the number of different functions F{x) of the above form, we will also bound 
the number of polynomials p of relative weight at most 2~'^(1 — e). Consider the terms appearing 
in F: 

• We need £ = 0{-^) derivatives and coefficients to describe F completely. 

• Any derivative p^i (x) is a a polynomial of degree at most d — k, and so has at most 

( " "1 
2\<d-kj possibilities. 

• Any coefficient si has O(-) possibilities. 
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Thus, the total the number of different F's is at most 

(^2(<<*-J . (l/e)j ^ <ci2'^^ 
where ci = (l/e)^('^/^') and cs = 0(d/(d - A:)!). 

□ 

We now turn to prove the Lemmas required for the proof of Theorem [71 We prove Lemma [10] 
in Subsection 12.11 and Lemma [TT] in Subsection 12.21 

2.1 Proof of the main technical lemma: Lemma 1101 

Before proving Lemma [TOl we need some claims regarding derivatives. The first claim shows that 
if a function has non-zero bias, it can be computed by an average of its derivatives. 

Claim 12. Let 5 : — > F2 he a function s.t. bias{g) 7^ 0. Then: 

where the identity holds for any x G Fg. 
Proof. Fix X. We have: 

□ 

The following claim shows that if a function has low weight, then derivatives of it will also have 
low weight, and thus large bias. 

Claim 13. Let f : ^ ¥2 he a function s.t. wt{f) < 2-^(1 - e). Let ai,...,as G F^ for 
1 < s < k—1 he any derivatives, and consider hias{fai,... , as)- Thenbias{fai,...,as) ^ 1 — 2^"'""^~'^(1 — e). 
In particular: 

1. If s<k-l then bias{fa^^,„^aj > 1 - 2'^+^"'= 

2. If s = k-1 then hias{faT_,...,as) > e 
Proof Consider faj_,...,as 

fa^,...,as = X] f{x + ^^^) 

/C[s] i&I 

For random x, the probability that f{x + ^jg/flj) = 1 is wt{f), which is at most 2~'^(1 — e). 
Thus by union bound, 

P^eFjp/C [s], f{x + Y,a^) = l]<r-H^-e) 
In particular it implies that 

Wtifa„...,aJ = PxeF^[/ai,...,a.(x) = 1] < 2^-'^(l - e) 

and we get the bound since bias{faj^^,,,^as) = 1 ~ 2wt(/aj^...^a^). □ 
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We now can prove Lemma [TOl using Claims [T2] and [T3l 

Proof of Lemma 1 1 (A Let / : F2 ^ F2 be a function s.t. wt{f) < 2^^{1 — e). Thus bias{f) 
1 — 2wt{f) > and by Claim [12] we can write: 

If /c = 1 we are done. Otherwise by Claim [T3l fai also has positive bias, 

Masifa,) > 1-2^+1-^(1-6) >0 
and so again by Claim [T^ we can write 



Thus we have: 



We can continue this process as long as we can guarantee that fai,...,as has non-zero bias for all 
oi, Ug € Fg. By Claim [T3l we know this happens for s < k — 1, and thus we have: 

where 

111 1 



bias{f) bias{fai) biasifa^^ai)' bias{fa:,,...,ak-i) 
We now bound Qai,...,aj.- -By Claim 1 131 we get that: 

aai,...,ak - ~ 11 1 _ 2s-k+l - 7 ii 1 _ 2-^ - T 



□ 



2.2 Proof of Approximation by sampling Lemma: Lemma 1111 

Proof of Lemma \11[ Choose hi, ...,h£ uniformly and independently from H. Fix x € F2, and let 
Zi be the random variable 

and let S = ^l±^±^. We will use the fact that if \S - (-1)^(^)| < 1 then sign{S) = (-l)-^(^). 
We first bound the probability that 

|5_ > 1/4 

By regular Chernoff arguments for bounded independent variables, since E[S] = (-l)^(^) and 
each Zi is of absolute value of at most C, we get that 

rh,,...MeH[\S - (-1)^(")| > 1/4] < e-isk 
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(see for example Theorem A. 1.16 in [T]). 

In particular for i = 0{C^ log 1/(5) we get that 

Phi,...,h,e//[|5-(-l)^(^)|>l/4]<5 
Thus by averaging arguments, there exists hi, ...,hi s.t. 



> 1/4] < s 



We now round each coefficient to a close rational, without damaging the approximation error. 
The coefficient of (— 1)'^»{^') is = If we round c^. to the closest integer [c/j.], we get that the 
coefficient of each (— 1)^»(^) is changed by at most ^, and thus the total approximation is changed 
by at most 1/2. Hence we have: 

[c,J(-l)^l{-) + ... + [c,J(-l)'^^(-)^ , 



Thus we got that 



) - (-1)^W| > 3/4] < s 



□ 



3 List-decoding size of Reed-Muller codes 

In this section we turn to the problem of bounding the list-decoding size of Reed-Muller codes, and 
we prove the First Main Theorem (Theorem Hj). We will see that the same techniques we used in 
Section [2] to bound the weight distribution, can be applied with minor variants to also bound the 
list-decoding size. 

The list-decoding size of a code is at least the accumulative weight distribution, i.e. L{a) > 
A{a). However, the list-decoding size can sometimes be much larger than the accumulative weight 
distribution. 

Theorem |4] is a direct corollary of Theorem [14} giving an upper bound on the list-decoding 
size at distance 2^~'^ — e, and the same lower bound we used to bound the accumulative weight 
distribution, obtained in Lemma [8j 

Theorem 14 (Upper bound on the list-decoding size). For any integer 1 < k < d — 1, 

L(2-^X1 - e)) < ci2'24^+'=^i^ 

where c\ = {1/ e)^^'^^^'^\ C2 = 0{d/{d — k)\) and C3 = 0{dk). Importantly, ci, 02,03 are independent 
of n, and 02,03 are independent of e. In particular for constant d we get that 

L{2-^ -e) < 2^^^^ 
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Proof of Theorem I4 The proof will be similar to the proof of Theorem [71 Fix / : — > F2 to be 

any function. We will bound the number of polynomials p of degree at most d s.t. dist{p, f) < 

2~'^(1 — e). Let p € RM(n,d) be such a polynomial, i.e. dist{p, f) < 2~'^(1 — e). Let g{x) = 
p{x) — f{x), then wt[g) < 2^*^(1 — e). As in the proof of Theorem [71 we use the derivatives of g to 

approximate g. Set 6 = 2^^'^+^). By Lemma [TOl there are £ = O(^) derivatives {^^^ : z € [£]} 
s.t. the distance between g{x) and F{x) is at most 5, where 

9„? ni (^) 



F{x) = sign{^^'^ > 



k 



Thus we have that F + f approximates p, since: 

distip, F + f) = dist{p - f,F)<6 

As in the proof of Theorem [71 given F (and /) there can be at most a single p G RM(n, d) s.t. 
dist{p, F + f) < 5, and so if we will bound the number of functions F we will bound the number 
of codewords close to /. 

Consider the derivative ga\,...^a^ {x) used in the expression for F. By linearity of derivation it 
can be decomposed as 

ffaf ,...,a'j.(^) = ^'af ,...,a|(^) ~ /a'j ,...,a», (^) 

/ n \ 

Each Pgi^ a.^S'^'^ ^ degree d — k polynomial, and so has at most 2^^'^-''' possibilities. Each 
fa\,...,aiix) — Ylsc[k] f(.x~^J2jes^)) described by the values of a\, ...,0^ € F2, since we have 

access to /, and so has at most 2^"' possibilities. Each coefficient Si has 0(l/e) possibilities. Thus, 
in total the number of different F's is at most 



where ci = (l/efW^^)^ ca = 0{d/{d - A:)!) and C3 = 0{kd). □ 
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A Generalized Reed-Muller codes 

The problems of bounding both the accumulative weight distribution and the list-decoding size 
can be extended to Generalized Reed-Muller, the code of low-degree polynomials over larger fields. 
However, our techniques fail to prove tight result in these cases. We briefly describe the reasons 
below, and give some partial results. 

We start by making some basic definitions. Let g be a prime, and let GRMq{n,d) denote the 
code of multivariate polynomials p{xi, ...,x„) over the field F^, of total degree at most d. 

Definition 7. The relative weight of a function / : F^ — F^ is the fraction of non-zero elements, 

wtU) = ^\{xe¥:^:f{x)^Q}\ 

Definition 8. The relative distance between two functions /, 5 : F^ — > F^ is defined as 

dist{f,g)=¥^^^r.[f{x)^g{x)] 

The accumulative weight distribution and the list-decoding size are defined analogously for 
GRMq{n,d), using the appropriate definitions for relative weight and relative distance. We denote 
them by Aq and Lq. For each 1 < k < d, we define a distance r^- 

1. For k = l,\ei d = {q — l)a + h, where 1 <h < q — 1. Define ri = (/~"(1 — b/q). 

2. For 2 < /c < d-l, let d-k = {q-l)a+b, where 1 <b< q-1. Define = q-°'{l-b/q){l-l/q). 

3. For k = d, define = 1 — 1/g. 
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We conjecture that both for the accumulative weight distribution and the hst-decoding size, the 
distances are the thresholds for the exponential dependency in n: 

Conjecture 15. Let e > be constant, and consider GRMq{n,d) for constant d. Then: 

• For a < ri — e both Aq{a) and Lq{a) are constants. 

• For rk < a < r^+i — e both Aq{a) and Lq{a) are 2®^"''). 

• For a> rd both Aq{a) and Lq{a) are 2®("'*). 

Proving lower bounds for Aq{rk) is similar to the case of RM{n,d). 
Lemma 16 (Lower bound for Aq). For any integer 1 < k < d, 

Aq{rk) > 2^("') 

The problem is proving matching upper bounds. Using directly the derivatives method we used 
to give upper bounds for RM{n, d) gives the same bounds for GRMq{n, d), alas they are not tight 
for q> 2: 

Aq{2-^ - e) < 20("'-') 

If we would like to get upper bounds closer to the lower bounds, a natural approach would be 
to generalize Lemma [TOl to taking several derivatives in the same direction (which is possible over 
larger fields). This would give us tight results for some values of k, if we could also generalize 
Claim [12] to the case of taking a multiple derivative in the same direction. However, we didn't find 
a way of doing so. 

Instead, we give partial results for Conjecture [15] in the two ends of the scale: when a < ri — e, 
and when r^-i < a < — e (when a > Lemma [T6l gives Lq{a) and Aq[Q) are both exponential 
in n'^). 

First, the minimal distance of GRMq(n, d) is known to be ri. Thus, for any e > 0, Aq{ri — e) = 1. 
Gopalan, Klivans and Zuckerman [3] prove that Lq{ri — e) is constant when q — 1 divides d: 

Theorem 17 (Corollary 18 in [4j). Assume q — 1 divides d. Then: 

Lq{ri - e) < c{q,d,e) 
Moving to the case of r^^i < a < r^ — e, we prove: 
Lemma 18. Let e > be constant, then: 

Aq{r,-e)<20i-'-') 
We now move on to prove Lemmas [TU] and [TS] We start with Lemma [TUl 

Proof of Lemma 1 1 61 We start by proving for 2 < k < d — 1. Let d — k = {q — l)a + b, where 
^ < b < q — 1. Single out a + 2 variables xi, ...,Xa+2, and let g be any degree k polynomial on the 
remaining variables . The following polynomial has degree d and weight exactly q^'^{l — b/q) {1 — 1/ q): 

g'{xi,...,Xn) = nn*^^*"-^) n^^'^+l"-^) i^a+2+ giXa+3,--,Xn)) 

\i=lj=l J \j=l J 



13 




The number of distinct polynomial g is 2^(" ). 

The proofs for k = 1 and k = d are similar: for A; = 1, let d = (g — l)a + b. Let la+i [x) 

be any independent linear functions, and consider 

(a q-l 
i=lj = l 

For k = d, let g be any deg ree d polynomial on variables X2, x-m and consider g' (^xi, Xn} — 

Xi+ g{x2,...,Xn). □ 

We now continue to prove Lemma [181 We first make some necessary definitions. 
Definition 9. The bias of a polynomial p{xi, over Fg is defined to be 

bias{p) = Ea;gFn[u;P(x)] 

where u) = e^'^^/'^ is a primitive ^-th root of unity. 

Kaufman and Lovett [B] prove that biased low-degree polynomials can be decomposed into a 
function of a constant number of lower degree polynomials: 

Theorem 19 (Theorem 2 in [6]). Let p{xi, ...,Xn) be a degree d polynomial, s.t. \bias{p)\ > e. 
Then p can be decomposed as a function of a constant number of lower degree polynomials: 

p{x) = F{gi{x), ...,gc{x)) 

where deg{gi) <d — l, and c = c{q,d,e). 

We will use Theorem 1191 to bound A(rrf — e) for any constant e > 0. 

Proof of Lemma\18l We will show that any polynomial p E GRMq{n,d) s.t. wt{p) < 1 — 1/p — e 
can be decomposed as 

p{x) = F{gi{x), ...,gc{x)) 

where deg{gi) < d — 1, and c depends only on q,d and e. Thus the number of such polynomials 
is bounded by the number of possibilities to choose c degree d — 1 polynomials, and a function 
F : Fg ^ ¥q. The number of such possibilities is at most 2*^^" \ Let p be s.t. wt{p) < 1 — 1/p — e. 
We will show there exists a G Fg, a s.t. bias{ap) > e. We will then finish by using Theorem [T9l 
on the polynomial ap. 

Consider the bias of ap for random a € F^: 

Fc&^[bias{ap)] = E„gF,,^gFj[w"P('^')] = 1 - wt{p) 

since for x's for which p{x) = 0, ¥a£Fq[^°'^^^'^] = 1, and for x s.t. p{x) / 0, ¥.aeFq[^^°'^'^^^] = 0. We 
thus get that: 

^o.^^ \{Q}[bias{ap)] = 1 ^wt{p) > — 

'^^^ q — 1 Q — 1 

So, there must exist a / s.t. bias{ap) > e. □ 
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